Critical · 9.0 CVE-2025-48017 EUVD-2025-15848GHSA-m57c-xh3v-q656

Improper Limitation of a Pathname to a Restricted Directory

Published May 20, 2025 · Updated May 20, 2025 · Assigned by SEL

Description

Improper limitation of pathname in Circuit Provisioning and File Import applications allows modification and uploading of files

Vendor	Product	Affected	Fixed
Schweitzer Engineering Laboratories	SEL-5056 Software-Defined Network Flow Controller	< 2.16.0	2.16.0